Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/KQz4QBfnJ-jVIL121ycVyCyzRRU.roa
File: KQz4QBfnJ-jVIL121ycVyCyzRRU.roa (raw, json)
Hash identifier: tVe0RY4udVyrVcVm5SjkWJ2XpX0bh2UOErSShD2GNgs=
Subject key identifier: 29:0C:F8:40:17:E7:27:E8:D5:20:BD:76:D7:27:15:C8:2C:B3:45:15
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01975BF64EC2A1E0EA7F8CF5F59BC6C29F50
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/KQz4QBfnJ-jVIL121ycVyCyzRRU.roa
Signing time: Tue 10 Jun 2025 22:29:18 +0000
ROA not before: Tue 10 Jun 2025 22:29:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 31.133.88.0/24 maxlen: 24
31.133.89.0/24 maxlen: 24
31.133.90.0/24 maxlen: 24
31.133.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:f6:4e:c2:a1:e0:ea:7f:8c:f5:f5:9b:c6:c2:9f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jun 10 22:29:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=290cf84017e727e8d520bd76d72715c82cb34515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:b8:de:7f:3c:d7:0b:a0:04:97:15:41:97:
11:d3:29:34:32:4b:c2:16:e7:e1:e1:79:f1:ae:c2:
50:6a:00:a6:4d:2a:51:cb:3a:ad:a9:74:65:6a:f6:
db:a2:b5:0a:09:01:ae:fd:9b:69:5f:b5:d8:b3:aa:
8f:bb:d0:15:b2:eb:1a:b3:5c:15:6c:e3:06:e3:8f:
7e:85:57:8a:f1:66:25:be:cc:93:a2:33:14:c9:95:
3d:34:7d:15:e7:5d:ee:b0:0a:0f:85:2e:82:48:15:
e9:13:09:aa:39:cb:ed:bc:9d:1c:89:22:3c:ca:be:
f1:fd:96:32:cf:4f:3c:c1:56:a1:9f:18:5e:49:b6:
ad:26:fc:cc:b3:8c:76:79:54:49:2e:d9:a1:33:fe:
c8:f5:5c:1c:32:de:0e:2f:ca:ca:9a:53:d0:54:b7:
8b:bd:94:09:ea:9e:c8:ad:bd:3a:a5:d0:43:4f:6a:
f4:bc:60:a7:f9:ce:2d:81:73:fd:4a:3d:4d:1c:6f:
e2:8d:97:85:1e:e7:2a:61:9e:ec:b6:6c:38:62:00:
be:09:ba:99:7b:a0:e2:63:91:a0:87:2b:63:d4:9d:
40:9e:3e:3e:e3:4e:77:a8:2b:58:59:c0:5d:58:08:
83:37:6b:31:38:7c:4b:c4:12:23:55:d3:20:b9:3e:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0C:F8:40:17:E7:27:E8:D5:20:BD:76:D7:27:15:C8:2C:B3:45:15
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/KQz4QBfnJ-jVIL121ycVyCyzRRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.88.0/22
Signature Algorithm: sha256WithRSAEncryption
46:44:67:4c:da:17:ae:17:c8:0b:93:36:bb:e9:26:b1:b3:fd:
41:4e:fb:36:0a:ee:4a:19:2f:31:cc:0b:eb:e5:0a:43:33:dc:
05:45:cf:fd:0b:16:38:77:ba:50:56:10:ff:b5:81:30:45:82:
7e:f2:61:cd:7b:37:ee:d4:6a:cd:e5:6c:8f:b4:8a:b7:98:ac:
ab:c1:01:c7:40:93:75:a8:27:56:43:d4:3c:04:b5:04:55:1e:
f6:20:2e:94:2a:da:13:9e:d3:a8:60:c2:3d:86:ce:e5:8d:c5:
75:30:1c:0e:2f:42:da:eb:80:36:c7:ae:a6:61:b4:bc:80:75:
d0:f5:1c:ae:dc:bd:0a:50:a2:d5:af:bd:a1:88:ca:7d:aa:15:
34:ac:7e:61:4d:0b:f1:2d:94:df:db:27:13:40:27:2a:e6:0f:
74:1f:2d:9b:90:8f:45:ce:dd:c9:13:36:76:6d:ab:4e:62:4e:
4a:e0:28:f2:64:33:a9:5c:f5:7e:bb:27:11:41:4b:fb:16:f5:
73:3c:7e:4d:2d:31:19:0c:56:62:33:53:9a:05:3f:f5:ff:76:
e4:22:4e:48:1c:10:2a:13:67:7d:fc:8d:48:e0:08:83:9a:00:
9b:b8:50:0b:a2:d0:e2:8d:1d:9e:94:49:32:48:be:c2:6a:91:
31:5a:08:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:08:03 2025 by rpki-client